Vulnerabilidades em Unisoc (Shanghai) Technologies Co., Ltd.

661 resultados
Análise Vexday

Com 647 CVEs catalogadas e nenhuma presença no catálogo KEV da CISA, a Unisoc apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que sugere baixa pressão ofensiva documentada no momento. O tipo de falha mais recorrente é CWE-862 (ausência de verificação de autorização), padrão que, quando explorado, permite acesso não autorizado a recursos ou funcionalidades restritas e merece atenção especial em revisões de código e hardening. A CVE mais relevante no contexto atual é CVE-2025-31715, com escore EPSS de 0,0156, indicando probabilidade de exploração ainda baixa, mas que deve ser monitorada dado seu destaque entre as ameaças ativas. As 6 vulnerabilidades surgidas nos últimos 90 dias e a ausência de PoCs públicas apontam para um perfil de risco moderado, embora a presença de 4 CVEs críticas reforce a necessidade de acompanhamento contínuo das atualizações do fabricante.

CVE-2023-30914MEDIUMIn email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privilegEPSS 0.1%CVE-2023-30938—In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privEPSS 0.1%CVE-2023-30942—In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privEPSS 0.1%CVE-2022-47324MEDIUMIn wlan driver, there is a possible missing permission check. This could lead to local information disclosure.EPSS 0.1%CVE-2023-42642—In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional executiEPSS 0.1%CVE-2023-42638—In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional executiEPSS 0.1%CVE-2022-47329MEDIUMIn wlan driver, there is a possible missing permission check. This could lead to local information disclosure.EPSS 0.1%CVE-2023-33909—In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional executiEPSS 0.1%CVE-2023-30925—In opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privilegesEPSS 0.1%CVE-2023-30919—In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privEPSS 0.1%CVE-2023-33908—In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution pEPSS 0.1%CVE-2022-47328MEDIUMIn wlan driver, there is a possible missing permission check. This could lead to local information disclosure.EPSS 0.1%CVE-2023-30927—In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privEPSS 0.1%CVE-2023-30913—In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privEPSS 0.1%CVE-2023-32789—In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privEPSS 0.1%CVE-2023-42654—In dm service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution prEPSS 0.1%CVE-2023-30921—In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privEPSS 0.1%CVE-2023-30939—In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privEPSS 0.1%CVE-2023-30920—In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privEPSS 0.1%CVE-2023-32788—In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privEPSS 0.1%